: Known Issues in the Panorama Plugin for Cisco TrustSec 1.0.2
Focus
Focus

Known Issues in the Panorama Plugin for Cisco TrustSec 1.0.2

Table of Contents

Known Issues in the Panorama Plugin for Cisco TrustSec 1.0.2

The following list describes known issues in the Panorama plugin for Cisco TrustSec version 1.0.2.

PLUG-5911

When the Panorama Plugin for Cisco TrustSec version 1.0.2 is running on a Panorama version earlier than 10.0.0, if you are pushing identical IP tags to multiple device groups, the Panorama Plugin for Cisco Trust Sec creates a message for each device group and sends it to configd. Because there are many mappings, the message is large, and creating and sending it takes time.
Workaround: Put all device groups under a parent device group, and put the parent device group in the plugin notify group at PanoramaCisco TrustSecSetupNotify Groups.

PLUG-3998

When the Panorama Plugin for Cisco TrustSec version 1.0.2 is running on a Panorama version earlier than 10.0.0, if you have multiple device groups assigned to a single notify group and the monitoring interval is set to 10 seconds, the plugin can take longer than 10 seconds to process the IP-to-tag mapping information retrieved from the pxGrid server.
Workaround: Put all device groups under a parent device group, and put the parent device group in the plugin notify group at PanoramaCisco TrustSecSetupNotify Groups.